Notified: April 12, 2006 Updated: May 03, 2006
Affected
We have fixed the vulnerability in our current code line as outlined here in our published "Security Vulnerability Fixing Policy and Process": http://www.oracle.com/technology/deploy/security/securityfixlifecycle.html When we have patches available for all affected versions and platforms, we will schedule the fix to appear in a Critical Patch Update.
The vendor has not provided us with any further information regarding this vulnerability.